Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/agyGfJeYccetsJ98Yhm6WwZFkxw.mft
File: agyGfJeYccetsJ98Yhm6WwZFkxw.mft (raw, json)
Hash identifier: funusO1H9M8m8a//PrBQ9/AeHnRUUVCnqJklr1VC9cE=
Subject key identifier: 8B:EC:B0:2C:E6:9A:E4:14:0A:FB:20:64:A5:8C:01:70:A7:DE:89:BA
Authority key identifier: 6A:0C:86:7C:97:98:71:C7:AD:B0:9F:7C:62:19:BA:5B:06:45:93:1C
Certificate issuer: /CN=6a0c867c979871c7adb09f7c6219ba5b0645931c
Certificate serial: 019CBA3997387922EEF1AC6995EF01845EDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/agyGfJeYccetsJ98Yhm6WwZFkxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/agyGfJeYccetsJ98Yhm6WwZFkxw.mft
Manifest number: 1005
Signing time: Wed 04 Mar 2026 19:01:02 +0000
Manifest this update: Wed 04 Mar 2026 19:01:02 +0000
Manifest next update: Thu 05 Mar 2026 19:01:02 +0000
Files and hashes: 1: VI3zjeHZdDu0ypEH0uILb9Lb4YA.roa (hash: i7eNNz6Wv21ngloC0Wp7tGBt5qo7AjOzv44UBAKSHF0=)
2: agyGfJeYccetsJ98Yhm6WwZFkxw.crl (hash: p4HOGXx9mPM/epIOKFzbcRcV8f9B42Rjq9ILryGqBCI=)
3: peSkqWCqswhUNJGM0RGGvifGjM4.roa (hash: dUUdnXPhtGozYsTQ/nVdXfCGkdsE7fr6bznqx68dgNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/agyGfJeYccetsJ98Yhm6WwZFkxw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/agyGfJeYccetsJ98Yhm6WwZFkxw.mft
rsync://rpki.ripe.net/repository/DEFAULT/agyGfJeYccetsJ98Yhm6WwZFkxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Mar 2026 14:20:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ba:39:97:38:79:22:ee:f1:ac:69:95:ef:01:84:5e:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a0c867c979871c7adb09f7c6219ba5b0645931c
Validity
Not Before: Mar 4 19:01:02 2026 GMT
Not After : Mar 5 19:01:02 2026 GMT
Subject: CN=8becb02ce69ae4140afb2064a58c0170a7de89ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f3:3d:47:3f:c9:d3:aa:22:41:f2:3b:f7:ae:
70:87:15:cf:a4:bf:ff:3b:2c:60:12:ac:fd:f1:04:
c9:54:40:52:50:8b:ea:3a:92:89:31:cd:ce:0d:a6:
b7:38:be:36:d9:c4:cf:a3:66:8b:30:47:2c:16:c3:
8a:5d:c3:fd:30:90:72:0f:9e:7d:93:bb:65:19:c7:
ff:88:c5:00:8b:30:63:47:bb:81:73:be:be:eb:6d:
9e:88:e6:7d:3d:a1:9f:f8:43:0f:14:37:8e:b8:cc:
b0:6a:3f:85:00:7e:57:00:f5:fb:a4:28:27:31:b8:
73:2c:26:47:f1:eb:be:8d:33:c6:3c:2f:23:00:d0:
7f:d2:30:03:6b:e2:cc:81:8d:0e:82:e7:e6:2f:51:
53:1d:c4:b9:ef:c2:f3:69:c7:69:40:36:ac:88:0a:
54:2a:39:5d:d0:87:17:aa:ff:b0:7c:7e:05:25:8a:
33:56:f7:51:79:3c:6e:11:c3:b1:14:16:e7:0b:5c:
11:94:da:ec:3b:2d:ee:77:0e:a4:52:71:8a:0f:7d:
53:4d:a9:bf:9d:0a:99:72:c4:4c:a4:51:6a:6f:86:
ad:12:2f:df:75:39:68:ea:93:c0:8c:f7:0a:25:16:
43:a3:7e:e6:ba:de:cb:ce:66:64:a2:f2:f6:ab:23:
d5:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:EC:B0:2C:E6:9A:E4:14:0A:FB:20:64:A5:8C:01:70:A7:DE:89:BA
X509v3 Authority Key Identifier:
keyid:6A:0C:86:7C:97:98:71:C7:AD:B0:9F:7C:62:19:BA:5B:06:45:93:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/agyGfJeYccetsJ98Yhm6WwZFkxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/agyGfJeYccetsJ98Yhm6WwZFkxw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/agyGfJeYccetsJ98Yhm6WwZFkxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:90:86:88:d1:7d:f9:c4:92:1c:9c:22:1c:d2:b2:99:21:2a:
71:87:36:a8:9b:12:ee:85:d6:fb:c7:69:7a:47:e0:cc:54:d6:
fb:f8:75:32:72:19:0c:84:2d:d8:ad:af:37:5b:bd:c1:ac:06:
b4:93:50:a5:76:8e:a9:a3:42:a4:87:9d:7a:98:c7:2d:55:a2:
e3:38:74:a0:6f:64:89:9d:e4:16:77:66:54:58:b8:f0:e8:75:
34:3e:d6:26:59:44:58:30:15:26:63:6a:78:ac:69:d2:03:5e:
68:46:21:8c:70:46:45:d6:96:35:a9:6c:4b:bc:98:96:73:b6:
3b:ef:35:57:7b:50:04:f9:e1:d3:b3:3f:cd:ab:22:7b:fa:1f:
c1:5e:3c:ab:bd:69:a3:c2:f1:0c:e2:0d:4c:c9:08:8b:e4:37:
e9:8d:3b:98:83:32:20:25:f9:ce:b2:46:44:22:0d:70:c5:f7:
76:a7:e6:55:37:bd:05:01:72:b3:87:dd:12:15:3e:88:8d:1b:
09:2d:fd:8c:13:24:d9:9b:6a:d8:e9:8a:ce:f6:6d:04:7e:c6:
f8:fb:03:fe:a8:9a:b5:23:65:ce:94:5a:c0:9a:1a:60:51:85:
91:fd:56:2f:d9:5b:a8:a9:35:80:0a:92:a9:d1:81:60:ae:6d:
a4:47:b3:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 20:53:54 2026 by rpki-client